Skip to content

Commit 80a0d97

Browse files
committed
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-9292519 - https://snyk.io/vuln/SNYK-JS-AXIOS-9403194
1 parent b4073ff commit 80a0d97

2 files changed

Lines changed: 55 additions & 33 deletions

File tree

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,12 +48,12 @@
4848
"@aws-sdk/client-lambda": "^3.540.0",
4949
"@aws-sdk/client-s3": "^3.540.0",
5050
"@aws-sdk/client-sqs": "^3.540.0",
51-
"@lumigo/tracer": "^1.91.0",
51+
"@lumigo/tracer": "^1.107.1",
5252
"@sentry/node": "^6.19.7",
5353
"@smithy/node-http-handler": "^2.5.0",
5454
"@types/aws-lambda": "^8.10.134",
5555
"alai": "1.0.3",
56-
"axios": "^1.6.7",
56+
"axios": "^1.8.3",
5757
"useragent": "2.3.0",
5858
"uuid": "^9.0.1",
5959
"validate.js": "0.13.1",

yarn.lock

Lines changed: 53 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -1422,22 +1422,23 @@
14221422
"@jridgewell/resolve-uri" "^3.1.0"
14231423
"@jridgewell/sourcemap-codec" "^1.4.14"
14241424

1425-
"@lumigo/node-core@1.15.0":
1426-
version "1.15.0"
1427-
resolved "https://registry.yarnpkg.com/@lumigo/node-core/-/node-core-1.15.0.tgz#30b51241b35475b90bc07388187833b590015887"
1428-
integrity sha512-FNODBgApk72hOVNR30mM3OFbCf2MwFPyHhHeb5Lg6pbfl8woBIT/25tr6gKV+bg0TbIUrjCaOMtzb6zeroKX9w==
1425+
"@lumigo/node-core@1.16.1":
1426+
version "1.16.1"
1427+
resolved "https://registry.yarnpkg.com/@lumigo/node-core/-/node-core-1.16.1.tgz#ba48940bc53dbb73e47f3b334ff5950a09d380d3"
1428+
integrity sha512-fAflD1J9MdhTx1VTX9l+LIP6xEA0LTycCnZq963Vhh3eR58EYeP/uwtbl0JzAzXuwpb/oYCm74+h+IU+OTv7YA==
14291429
dependencies:
14301430
shimmer "^1.2.1"
14311431
utf8 "^3.0.0"
14321432

1433-
"@lumigo/tracer@^1.91.0":
1434-
version "1.91.0"
1435-
resolved "https://registry.yarnpkg.com/@lumigo/tracer/-/tracer-1.91.0.tgz#be3249b56ee1487155dfa6f4aad0fb88ddac8c05"
1436-
integrity sha512-t/8cXtj9IqJKzN2ok77BFzUO1UjgBC7e8H58wB5SZ9F+5Kn6uOeggH1HvtHU/WPW73q+CnjnMcl3X5g/BOOtxw==
1433+
"@lumigo/tracer@^1.107.1":
1434+
version "1.107.1"
1435+
resolved "https://registry.yarnpkg.com/@lumigo/tracer/-/tracer-1.107.1.tgz#5a906c367531f4238dc03a5b37682390b55f13b2"
1436+
integrity sha512-4DpsQ6BLrJue4mxmSd9V/eayYcopnJOa+j6ikaqkEJV8rwNiv8nb4cfscy8FAKSssx5NveRDKU8kn4MtyWbA0Q==
14371437
dependencies:
1438-
"@lumigo/node-core" "1.15.0"
1438+
"@lumigo/node-core" "1.16.1"
14391439
agentkeepalive "^4.1.4"
1440-
axios "1.6.5"
1440+
axios "1.8.4"
1441+
rfdc "^1.4.1"
14411442
shimmer "1.2.1"
14421443
utf8 "^3.0.0"
14431444

@@ -2890,21 +2891,12 @@ asynckit@^0.4.0:
28902891
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
28912892
integrity sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==
28922893

2893-
axios@1.6.5:
2894-
version "1.6.5"
2895-
resolved "https://registry.yarnpkg.com/axios/-/axios-1.6.5.tgz#2c090da14aeeab3770ad30c3a1461bc970fb0cd8"
2896-
integrity sha512-Ii012v05KEVuUoFWmMW/UQv9aRIc3ZwkWDcM+h5Il8izZCtRVpDUfwpoFf7eOtajT3QiGR4yDUx7lPqHJULgbg==
2894+
axios@1.8.4, axios@^1.8.3:
2895+
version "1.8.4"
2896+
resolved "https://registry.yarnpkg.com/axios/-/axios-1.8.4.tgz#78990bb4bc63d2cae072952d374835950a82f447"
2897+
integrity sha512-eBSYY4Y68NNlHbHBMdeDmKNtDgXWhQsJcGqzO3iLUM0GraQFSS9cVgPX5I9b3lbdFKyYoAEGAZF1DwhTaljNAw==
28972898
dependencies:
2898-
follow-redirects "^1.15.4"
2899-
form-data "^4.0.0"
2900-
proxy-from-env "^1.1.0"
2901-
2902-
axios@^1.6.7:
2903-
version "1.6.7"
2904-
resolved "https://registry.yarnpkg.com/axios/-/axios-1.6.7.tgz#7b48c2e27c96f9c68a2f8f31e2ab19f59b06b0a7"
2905-
integrity sha512-/hDJGff6/c7u0hDkvkGxR/oy6CbCs8ziCsC7SqmhjfozqiJGc8Z11wrv9z9lYfY4K8l+H9TpjcMDX0xOZmx+RA==
2906-
dependencies:
2907-
follow-redirects "^1.15.4"
2899+
follow-redirects "^1.15.6"
29082900
form-data "^4.0.0"
29092901
proxy-from-env "^1.1.0"
29102902

@@ -4219,10 +4211,10 @@ fn.name@1.x.x:
42194211
resolved "https://registry.yarnpkg.com/fn.name/-/fn.name-1.1.0.tgz#26cad8017967aea8731bc42961d04a3d5988accc"
42204212
integrity sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==
42214213

4222-
follow-redirects@^1.15.4:
4223-
version "1.15.5"
4224-
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.5.tgz#54d4d6d062c0fa7d9d17feb008461550e3ba8020"
4225-
integrity sha512-vSFWUON1B+yAw1VN4xMfxgn5fTUiaOzAJCKBwIIgT/+7CuGy9+r+5gITvP62j3RmaD5Ph65UaERdOSRGUzZtgw==
4214+
follow-redirects@^1.15.6:
4215+
version "1.15.9"
4216+
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.9.tgz#a604fa10e443bf98ca94228d9eebcc2e8a2c8ee1"
4217+
integrity sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==
42264218

42274219
foreground-child@^2.0.0:
42284220
version "2.0.0"
@@ -7103,6 +7095,11 @@ reusify@^1.0.4:
71037095
resolved "https://registry.yarnpkg.com/reusify/-/reusify-1.0.4.tgz#90da382b1e126efc02146e90845a88db12925d76"
71047096
integrity sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==
71057097

7098+
rfdc@^1.4.1:
7099+
version "1.4.1"
7100+
resolved "https://registry.yarnpkg.com/rfdc/-/rfdc-1.4.1.tgz#778f76c4fb731d93414e8f925fbecf64cce7f6ca"
7101+
integrity sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==
7102+
71067103
rimraf@^3.0.0, rimraf@^3.0.2:
71077104
version "3.0.2"
71087105
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-3.0.2.tgz#f1a5402ba6220ad52cc1282bac1ae3aa49fd061a"
@@ -7425,7 +7422,16 @@ string-length@^4.0.1:
74257422
char-regex "^1.0.2"
74267423
strip-ansi "^6.0.0"
74277424

7428-
"string-width-cjs@npm:string-width@^4.2.0", "string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
7425+
"string-width-cjs@npm:string-width@^4.2.0":
7426+
version "4.2.3"
7427+
resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.3.tgz#269c7117d27b05ad2e536830a8ec895ef9c6d010"
7428+
integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==
7429+
dependencies:
7430+
emoji-regex "^8.0.0"
7431+
is-fullwidth-code-point "^3.0.0"
7432+
strip-ansi "^6.0.1"
7433+
7434+
"string-width@^1.0.2 || 2 || 3 || 4", string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
74297435
version "4.2.3"
74307436
resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.3.tgz#269c7117d27b05ad2e536830a8ec895ef9c6d010"
74317437
integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==
@@ -7475,7 +7481,14 @@ string_decoder@~1.1.1:
74757481
dependencies:
74767482
safe-buffer "~5.1.0"
74777483

7478-
"strip-ansi-cjs@npm:strip-ansi@^6.0.1", strip-ansi@^6.0.0, strip-ansi@^6.0.1:
7484+
"strip-ansi-cjs@npm:strip-ansi@^6.0.1":
7485+
version "6.0.1"
7486+
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9"
7487+
integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==
7488+
dependencies:
7489+
ansi-regex "^5.0.1"
7490+
7491+
strip-ansi@^6.0.0, strip-ansi@^6.0.1:
74797492
version "6.0.1"
74807493
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9"
74817494
integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==
@@ -8075,7 +8088,7 @@ wordwrap@^1.0.0:
80758088
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
80768089
integrity sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==
80778090

8078-
"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0", wrap-ansi@^7.0.0:
8091+
"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0":
80798092
version "7.0.0"
80808093
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
80818094
integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
@@ -8093,6 +8106,15 @@ wrap-ansi@^6.2.0:
80938106
string-width "^4.1.0"
80948107
strip-ansi "^6.0.0"
80958108

8109+
wrap-ansi@^7.0.0:
8110+
version "7.0.0"
8111+
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
8112+
integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
8113+
dependencies:
8114+
ansi-styles "^4.0.0"
8115+
string-width "^4.1.0"
8116+
strip-ansi "^6.0.0"
8117+
80968118
wrap-ansi@^8.1.0:
80978119
version "8.1.0"
80988120
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-8.1.0.tgz#56dc22368ee570face1b49819975d9b9a5ead214"

0 commit comments

Comments
 (0)